NIS2, DORA, CRA, sector standards and digital sovereignty: what the texts change for organisations and their management, and how to prepare.
7 articles
In force since 17 January 2025, DORA requires financial entities to manage ICT risk, keep a register of their providers, meet short reporting deadlines and test their resilience. The points supervisors check.
Banks, insurers and payment providers fall within the scope of both NIS2 and DORA. The directive provides that the sector-specific text prevails: what that changes in practice for risk management and incident reporting.
Under NIS2, cybersecurity is no longer the CISO's business alone: management approves the measures, oversees their implementation, takes training and can be held liable. What to prepare, even before French law catches up.
Understand how the Cyber Resilience Act reshapes product security expectations and what CISOs should prioritize now to strengthen compliance, reduce risk, and prepare their teams.
As European companies increasingly rely on U.S. technology giants, concerns over digital sovereignty are rising. In an effort to mitigate risks associated with foreign tech dependency, European firms are exploring alternatives and pushing for greater control over their digital infrastructure and data. This growing movement highlights the tension between innovation and independence in the tech…
Explore the key implications of France’s adaptation of the NIS2 Directive for industry players, focusing on enhanced cybersecurity measures, compliance requirements, and the role of digital infrastructure. This article sheds light on what businesses need to know to navigate this regulatory landscape effectively.
The integration of safety instrumented systems (SIS) in industrial settings is a critical component of modern-day operational technology (OT) cybersecurity.
The baseline
A security roadmap your management decides on and can defend, built on the gap between what it expects, what is required and what your teams declare is in place.
Explore Trusted AssessmentProof: French public financial institution
After an audit by its supervisor and ahead of DORA: a cybersecurity training programme for more than 130 people in a public financial institution's IT department, designed, run and then handed over to the client.
40% of the three-year programme delivered in the first year
Tell us about your context: an expert will get back to you.
or write directly to trust@blooo.io
Your e-mail is sent from your own mail client: blooo.io stores nothing. We only use your details to reply to you. Privacy policy.